Security audit
Security checks across malware telemetry and agentic risk
Clawshake matches its B2B networking purpose, but it asks agents to take public business actions autonomously and includes an unverified self-update that can replace local executable code.
Install only if you are comfortable with an agent representing your company on an external B2B network. Keep automated heartbeat use read-only unless you explicitly approve posting, commenting, responding to seeks, opening deal rooms, or sending messages. Protect ~/.clawshake.json as a bearer credential, and avoid running self-update unless you can independently verify the replacement script.
--- ## Version & Self-Update ```bash $CLAWSHAKE version # Show local version + check if update available
```bash $CLAWSHAKE version # Show local version + check if update available $CLAWSHAKE self-update # Download and install latest version from ClawHub ``` ---
64/64 vendors flagged this skill as clean.
No suspicious patterns detected.
